Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139332e302f32342d3234203d3e203138313533.roa
File:                     3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier:          wJ0OIiNjTdldfLYb19hTKZ+fKESqf6C7MeF3YvJI8Ys=
Subject key identifier:   14:02:DC:5A:C9:18:0B:7F:19:02:C5:21:F0:23:28:DB:AC:37:68:F4
Certificate issuer:       /CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
Certificate serial:       608167623079FCBAEAD12E73D0F267F21D1944AE
Authority key identifier: 2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139332e302f32342d3234203d3e203138313533.roa
Signing time:             Sun 03 May 2026 02:40:32 +0000
ROA not before:           Sun 03 May 2026 02:35:32 +0000
ROA not after:            Sun 02 May 2027 02:40:32 +0000
asID:                     18153
IP address blocks:        202.72.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl
                          rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:81:67:62:30:79:fc:ba:ea:d1:2e:73:d0:f2:67:f2:1d:19:44:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7AB1335C4E07C6D34610DA5B920C496F6B61D0
        Validity
            Not Before: May  3 02:35:32 2026 GMT
            Not After : May  2 02:40:32 2027 GMT
        Subject: CN=1402DC5AC9180B7F1902C521F02328DBAC3768F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:00:43:d4:6f:34:b7:81:43:31:d1:8d:80:
                    66:5c:94:25:bf:2f:1b:49:41:fd:12:09:df:0c:fc:
                    e9:00:4d:69:7a:01:00:48:21:4a:2f:56:85:06:7a:
                    25:0e:53:14:92:02:53:d2:7c:43:ef:2f:7f:5a:7d:
                    62:5c:d2:bf:90:62:d8:73:7e:71:dc:dc:ed:ee:a5:
                    3e:74:2f:7e:7e:66:00:25:9e:d4:f0:be:f0:5b:25:
                    8a:0a:4d:46:4f:38:0e:2a:3d:41:8f:e7:47:a5:83:
                    9b:06:b4:53:0c:c6:fe:13:4d:fd:19:8e:cb:b2:d5:
                    dc:f3:d7:42:96:6b:c8:ac:6d:cb:b0:97:c2:e5:a0:
                    72:e5:a9:01:45:18:68:90:50:9b:b8:7f:1a:ba:2b:
                    8e:b7:8b:d1:db:11:f7:72:bc:9d:79:a5:bc:c5:25:
                    72:6c:61:9f:da:1b:8a:5a:52:bc:a9:34:f1:a6:d8:
                    e8:97:46:49:16:e7:ff:92:8c:01:0a:d5:e0:71:16:
                    2c:40:a9:cb:de:02:52:c1:4a:d8:e5:6a:44:2e:12:
                    de:60:04:8b:1c:98:cc:5e:06:e2:44:db:37:29:a8:
                    68:5a:ce:af:73:f3:f1:f2:51:ab:33:c0:b7:56:47:
                    fc:32:c4:f7:e0:14:2e:da:2c:7b:0a:70:22:99:01:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:02:DC:5A:C9:18:0B:7F:19:02:C5:21:F0:23:28:DB:AC:37:68:F4
            X509v3 Authority Key Identifier:
                keyid:2E:7A:B1:33:5C:4E:07:C6:D3:46:10:DA:5B:92:0C:49:6F:6B:61:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E7AB1335C4E07C6D34610DA5B920C496F6B61D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139332e302f32342d3234203d3e203138313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:6c:5f:c0:86:0a:12:84:59:b0:aa:3b:20:f6:70:21:5a:af:
         dc:96:1d:89:fc:14:45:03:27:e4:af:2e:55:4c:67:fe:5f:9b:
         9e:a1:eb:dc:2c:e6:d5:52:1e:51:26:37:ff:a3:9c:9a:f7:61:
         f0:1c:83:2d:8c:c0:da:ee:0d:a2:d9:e2:1f:9e:94:07:b8:8e:
         09:1e:f4:ab:fb:4b:5d:d1:46:2e:3b:83:8a:91:b2:e8:60:57:
         de:ba:33:48:fb:79:9b:48:a0:cd:75:52:6f:07:e1:cb:fa:72:
         02:91:73:10:38:3e:3e:fc:56:75:c2:2a:06:33:49:df:77:be:
         8a:f2:95:9b:a7:a8:39:c0:df:fe:f6:58:ce:22:f7:50:49:30:
         64:c5:22:1d:59:84:96:45:48:9a:ad:ab:0a:00:50:d7:c8:7b:
         08:3f:64:ab:4c:1a:da:b2:2d:e7:04:a8:be:14:ca:95:87:29:
         e3:00:3d:dc:7b:59:91:4f:9b:72:99:7f:6e:43:e3:c5:b1:72:
         90:d6:92:58:f2:f2:1e:7e:80:f1:b5:ee:db:98:2a:30:43:11:
         97:3f:cd:7f:5b:ab:b3:83:99:a6:47:ac:25:5f:a9:83:f9:7b:
         5d:22:6a:bc:5f:d7:6e:2e:a9:96:aa:32:43:10:a2:da:d3:8d:
         71:53:c3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:21:33 2026 by rpki-client